mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-28 21:17:36 +00:00
80 lines
3.4 KiB
Plaintext
80 lines
3.4 KiB
Plaintext
secubox-auth (1.1.0-1~bookworm1) bookworm; urgency=medium
|
|
|
|
* Phase 2: Requires=secubox-core.service -> Wants= on this module's unit
|
|
(remove the hard cascade-stop when secubox-core restarts/fails).
|
|
|
|
-- Gerald KERMA <devel@cybermind.fr> Sun, 19 Jul 2026 12:00:00 +0200
|
|
|
|
secubox-auth (1.0.4-1~bookworm1) bookworm; urgency=medium
|
|
|
|
* feat: admin-TOTP requirement is now toggleable from the webui and defaults
|
|
OFF so a node stays reachable (was: implicitly forced for every admin).
|
|
- New GET/POST /api/v1/auth/settings (admin-gated) exposing require_admin_totp;
|
|
the value persists to /etc/secubox/auth-runtime.json.
|
|
- Login enforcement gated on _get_require_admin_totp(): runtime file >
|
|
[auth] config > default False. Fail-open: a config read error no longer
|
|
locks admins out.
|
|
- Tests realigned to the reachability-first contract + /settings roundtrip;
|
|
fixture isolates config + runtime paths (10 passing).
|
|
|
|
-- Gerald KERMA <devel@cybermind.fr> Sat, 11 Jul 2026 12:00:00 +0200
|
|
|
|
secubox-auth (1.0.3-1~bookworm1) bookworm; urgency=medium
|
|
|
|
* fix: login failed and /status 500d with NameError: the sessions file was
|
|
defined as __SESSIONS_FILE (dunder) but every handler referenced
|
|
_SESSIONS_FILE (single underscore). Normalised to _SESSIONS_FILE so session
|
|
persistence + status work; logins succeed again.
|
|
|
|
-- Gerald KERMA <devel@cybermind.fr> Fri, 11 Jul 2026 08:00:00 +0200
|
|
|
|
secubox-auth (1.0.2-1~bookworm2) bookworm; urgency=medium
|
|
|
|
* webui: hybrid-dark cyan reskin (WebUI Panel Guidelines) baked into the package.
|
|
|
|
-- Gerald KERMA <devel@cybermind.fr> Thu, 10 Jul 2026 10:00:00 +0200
|
|
|
|
secubox-auth (1.0.2-1~bookworm1) bookworm; urgency=medium
|
|
|
|
* Fix (#498) : ntp_health.probe() falls back to timedatectl/systemd-
|
|
timesyncd when chronyc isn't installed. SecuBox boxes ship with
|
|
timesyncd by default, so the chrony-only probe always returned
|
|
`synced: False` and the admin login UI permanently showed
|
|
'Clock not synced' (TOTP window then widened to ±60s but the
|
|
operator was still confused). Added a chrony → timedatectl
|
|
fallback chain with explicit `source` in the response so the
|
|
operator can see which backend answered.
|
|
|
|
-- Gérald Kerma <devel@cybermind.fr> lun., 08 juin 2026 07:49:50 +0000
|
|
|
|
secubox-auth (1.0.4-1~bookworm1) bookworm; urgency=medium
|
|
|
|
* Add dynamic menu system with menu.d JSON definitions
|
|
* Menu items auto-registered when package installed
|
|
|
|
-- Gerald KERMA <devel@cybermind.fr> Sat, 21 Mar 2026 16:36:21 +0100
|
|
|
|
secubox-auth (1.0.3-1~bookworm1) bookworm; urgency=medium
|
|
|
|
* Add UMask=0000 for world-accessible sockets
|
|
* Add www-data to secubox group for nginx access
|
|
* Make dashboard endpoints public (no auth for read-only)
|
|
* Fix security endpoint error handling
|
|
|
|
-- Gerald KERMA <devel@cybermind.fr> Sat, 21 Mar 2026 08:12:37 +0100
|
|
|
|
secubox-auth (1.0.2-1~bookworm1) bookworm; urgency=medium
|
|
|
|
* Fix RuntimeDirectory conflict between services
|
|
* Only secubox-core manages /run/secubox directory
|
|
* Fix secubox-core.service install path (use /usr/lib/systemd/system)
|
|
|
|
-- Gerald KERMA <devel@cybermind.fr> Sat, 21 Mar 2026 08:06:00 +0100
|
|
|
|
secubox-auth (1.0.1-1~bookworm1) bookworm; urgency=medium
|
|
|
|
* Initial release — migration depuis SecuBox OpenWrt.
|
|
* Port de luci-app-auth-guardian : backend FastAPI + frontend conservé.
|
|
|
|
-- Gerald KERMA <devel@cybermind.fr> Sat, 21 Mar 2026 07:36:46 +0100
|